CVE-2010-1633

Related Files

OpenSSL Toolkit 1.0.0a

Posted Jun 3, 2010

Site openssl.org

OpenSSL is a robust, fully featured Open Source toolkit implementing the Secure Sockets Layer (SSL v2/v3) and Transport Layer Security (TLS v1) protocols with full-strength cryptography world-wide.

Changes: A security vulnerability which could potentially be exploited to bypass key validation was resolved.

tags | encryption, protocol

advisories | CVE-2010-1633

SHA-256 | 18a9bd1fc02b8ef90dded34fafaa9089baaafef278a19fc4e89c2ab0dcf70f63

Download | Favorite | View

OpenSSL Security Advisory 20100601

Posted Jun 1, 2010

Site openssl.org

OpenSSL Security Advisory 20100601 - CMS structures containing OriginatorInfo are mishandled this can write to invalid memory addresses or free up memory twice. When verification recovery fails for RSA keys an uninitialized buffer with an undefined length is returned instead of an error code.

tags | advisory

advisories | CVE-2010-0742, CVE-2010-1633

SHA-256 | f0593cbc01b0ca402567bb9b540967cd7e8d07297e11f68976b66612699df0cf

Download | Favorite | View